This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft File: hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json) Hash identifier: 2tK9cE78SNu6aa7yyDVL/Hg5eQK37a5028dRcB59uMU= Subject key identifier: F3:C1:DB:0D:4B:CA:FA:87:2D:AB:7F:34:39:64:D5:16:31:D3:36:BF Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB Certificate issuer: /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Certificate serial: 0221 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft Manifest number: 021B Signing time: Sun 25 Jan 2026 01:29:52 +0000 Manifest this update: Sun 25 Jan 2026 01:29:51 +0000 Manifest next update: Sun 01 Feb 2026 01:29:51 +0000 Files and hashes: 1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: cJsQjizX7vezqwotfcasIcCVsd5uUdP67tw+1j5Oes8=) 2: 5576D030D61711EEB983D919C4F9AE02.roa (hash: UaaSyqLY1EU1feMuBNb93HrMgg8A6BJd78TyE8+TiZU=) 3: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: JeP8VoOcpiutGG7hGzbyaQvIgNDCVBOYu3S0WeuVu3E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Feb 2026 01:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 545 (0x221) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB Validity Not Before: Jan 25 01:29:51 2026 GMT Not After : Feb 1 01:29:51 2026 GMT Subject: CN=6975720f-ae14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:33:ea:9c:ad:51:5f:b1:f9:70:7d:94:ec: 31:8a:7b:f9:1c:4b:82:17:da:57:4c:22:7e:bf:bd: 69:7f:f1:f4:d4:43:87:43:74:51:fe:b8:ec:6e:c8: 13:27:25:aa:c2:58:9f:d5:34:20:96:cf:2d:3d:92: ce:bd:27:b8:84:a4:73:f1:7c:f2:f9:7e:f5:fb:49: 7c:f7:73:bd:6d:aa:46:f8:27:ab:96:ae:fb:17:0f: 71:b5:ac:01:13:8f:7f:18:96:0b:86:48:0e:ae:63: 64:25:56:2c:9f:13:9e:16:ce:de:7a:59:a0:b7:4d: 84:c8:fd:d1:5b:a9:b4:22:da:ef:0d:d1:b2:38:ad: 92:e8:1a:a7:f5:8c:b7:0c:31:6e:b8:5d:a0:f0:24: 18:bd:7d:e1:f4:d0:ff:fc:eb:00:b8:a7:dd:e5:a9: be:50:d7:d3:be:65:55:7a:0c:4f:4f:d5:f8:cf:87: 8b:c1:82:09:bc:29:3c:32:40:0c:80:17:fd:1e:cd: 82:f0:3c:8e:5f:25:ca:6b:52:01:fa:84:82:98:bf: 13:c5:13:d6:f9:de:90:b2:24:6e:31:57:a6:f6:16: 3f:70:dc:c5:f3:1b:4a:b8:e0:7a:9e:2d:99:ab:4f: bf:33:88:c0:58:cd:94:a4:c1:7b:6d:31:8b:23:51: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C1:DB:0D:4B:CA:FA:87:2D:AB:7F:34:39:64:D5:16:31:D3:36:BF X509v3 Authority Key Identifier: keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:9f:af:37:9d:5d:77:02:84:2a:53:85:e0:c5:0b:5f:1e:33: a0:b0:cd:e3:4e:1e:39:c1:c5:fb:12:a1:87:d5:f3:6e:39:a5: 0c:66:b0:e2:b9:e6:c7:39:b2:6a:28:eb:f5:ad:52:fc:9a:f3: 0b:17:90:2e:91:76:80:b3:ab:9f:9d:7a:46:57:da:f6:c6:34: ef:2f:dd:6f:4a:f7:d9:23:de:a2:44:2b:bc:da:8b:25:ea:9b: 17:97:e8:10:3b:e5:23:87:18:b9:22:9e:e9:e2:a7:34:6a:e8: 15:5d:a7:1d:a8:20:88:84:7c:92:5a:f2:aa:90:83:47:99:a6: bd:05:62:f9:7b:cb:ca:ba:d4:6b:9c:fa:20:d6:c4:f6:11:e8: 68:33:81:1e:f7:70:d2:a4:ce:7e:66:18:dd:96:37:bc:c1:13: 70:3f:e3:15:6e:4d:07:8b:87:3b:51:8f:af:ef:6e:b9:b6:76: 0c:06:66:84:5b:e8:8c:d5:2a:67:5e:80:c9:09:31:46:32:71: 3a:7c:a2:33:f6:7f:1c:98:de:2f:38:3b:42:c6:25:2d:1a:59: 6e:3a:91:4c:a8:cc:e0:9f:63:6a:38:15:ad:a8:70:f4:b8:7f: b0:09:4b:13:7f:ad:c8:82:f3:28:da:6f:73:18:bf:e5:b3:da: 52:e9:a5:f5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz NTgyQTIwRUIwHhcNMjYwMTI1MDEyOTUxWhcNMjYwMjAxMDEyOTUxWjAYMRYwFAYD VQQDDA02OTc1NzIwZi1hZTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+wz6pytUV+x+XB9lOwxinv5HEuCF9pXTCJ+v71pf/H01EOHQ3RR/rjsbsgT JyWqwlif1TQgls8tPZLOvSe4hKRz8Xzy+X71+0l893O9bapG+Cerlq77Fw9xtawB E49/GJYLhkgOrmNkJVYsnxOeFs7eelmgt02EyP3RW6m0ItrvDdGyOK2S6Bqn9Yy3 DDFuuF2g8CQYvX3h9ND//OsAuKfd5am+UNfTvmVVegxPT9X4z4eLwYIJvCk8MkAM gBf9Hs2C8DyOXyXKa1IB+oSCmL8TxRPW+d6QsiRuMVem9hY/cNzF8xtKuOB6ni2Z q0+/M4jAWM2UpMF7bTGLI1Fe/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPB2w1L yvqHLat/NDlk1RYx0za/MB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzn683nV13AoQqU4XgxQtfHjOgsM3jTh45wcX7EqGH1fNuOaUMZrDi uebHObJqKOv1rVL8mvMLF5AukXaAs6ufnXpGV9r2xjTvL91vSvfZI96iRCu82osl 6psXl+gQO+Ujhxi5Ip7p4qc0augVXacdqCCIhHySWvKqkINHmaa9BWL5e8vKutRr nPog1sT2EehoM4Ee93DSpM5+Zhjdlje8wRNwP+MVbk0Hi4c7UY+v7265tnYMBmaE W+iM1SpnXoDJCTFGMnE6fKIz9n8cmN4vODtCxiUtGlluOpFMqMzgn2NqOBWtqHD0 uH+wCUsTf63IgvMo2m9zGL/ls9pS6aX1 -----END CERTIFICATE-----Generated at Sun Jan 25 08:04:09 2026 by rpki-client